CVE-2026-58048
CriticalCVSS 9.4Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
Risk Assessment
An attacker may gain unauthorized access to data or perform administrative operations on the server.
Recommendation
Update cPanel to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in cPanel
See all- CVE-2026-67401Critical
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component.
- CVE-2026-65643High
Eval injection vulnerability in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
- CVE-2026-58047Medium
HTTP Smuggling in cPanel allows potential leak of credentials.
Original NVD description (English source)
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.